Comparisons · · 8 min read

Supabase vs Nhost in 2026

Two Postgres backends with sign-in, storage and functions, compared on API style, plan limits, overage rules and the company you sign with.

Pick Supabase if you want a REST API generated from your tables, Row Level Security in Postgres and paid extras such as branching and read replicas. Pick Nhost if you prefer GraphQL with role-based permissions, or if the contract has to be with a European company: Nhost AB is Swedish, while Supabase's contracting company is in Singapore. Both start free and charge from $25 a month for production.

Whichever you choose, the frontend still needs a host. That's where Eurobase fits, as a partial piece rather than a replacement for either.

Supabase and Nhost at a glance

SupabaseNhost
Company you sign withSupabase Pte. Ltd., SingaporeNhost AB, Sweden
Governing lawCaliforniaStockholm, Sweden, in its website terms
DatabaseDedicated Postgres per projectDedicated Postgres per project
Main APIREST through PostgREST, plus GraphQL through pg_graphqlGraphQL through Hasura
Access rulesPostgres Row Level SecurityRole-based permissions declared as metadata
FunctionsEdge Functions in TypeScript on DenoServerless functions, plus Nhost Run for your own containers
Free plan500 MB database, 1 GB files, 50,000 monthly active users, 2 active projects1 GB database, 1 GB files, unlimited users, 1 active project
Paid plansPro from $25, Team from $599 a monthPro from $25, Team from $599 a month
Over the plan limitsSpend cap on by default on ProProject keeps running and excess is billed
Certifications on TeamSOC 2 and ISO 27001SOC 2 Type II
Self-hostingDocker ComposeOffered

Prices are in US dollars, from each provider's own page, checked on 10 November 2026.

What actually separates them

  • How your client talks to the data. Supabase leads with supabase-js and a REST endpoint for every table. Nhost leads with @nhost/nhost-js and a GraphQL API. Switching later means rewriting every query and sign-in call, so decide this first.
  • Where permissions live. Supabase pushes access control into Postgres policies, which also protect the database from any other client. Nhost declares who may read or write each table as GraphQL metadata.
  • Who the provider is. Hosting your Supabase project in Frankfurt still leaves you with a Singapore contract. If a customer contract or public tender asks for an EU company, only Nhost passes here, and EU region vs EU company covers the reasoning.
  • What happens at the limit. Supabase Pro ships with a spend cap switched on, and you turn it off to pay for usage past the included quota. Nhost says it never stops your project and bills the excess instead.
  • Which region you can pick. Supabase lists exact European regions by name. Nhost advertises 6 regions without naming them on its site, and its documentation shows eu-central-1 and us-west-2 in example URLs. Ask Nhost to confirm your region in writing before you load personal data.

1. Supabase

Supabase gives every project its own Postgres database with Auth, Storage, Realtime, Edge Functions, cron and queues around it. The REST API is generated from your schema by PostgREST and is built to work with Row Level Security, so a browser can query tables directly within the rules you write. For GraphQL, the pg_graphql extension reflects the same schema.

In Europe you can choose Ireland, London, Paris, Frankfurt, Zurich or Stockholm, all AWS regions. Its documentation warns that the general Europe option can include London and Zurich, which aren't in the EU, so pick a named region if residency matters.

  • Best for: teams that like SQL, want a REST API from day one and expect to need branching, read replicas or point-in-time recovery.
  • Price: Free at $0, with projects paused after a week without activity. Pro from $25 a month, with $10 of compute credits that cover one Micro instance, 8 GB of disk, 100,000 monthly active users, 250 GB of egress and 7 days of daily backups. Point-in-time recovery starts at $100 a month, and branching costs $0.01344 per branch per hour.
  • What it lacks: an EU contracting party. Running it yourself with Docker Compose avoids the contract question, but its own docs list features missing from self-hosted installs, among them branching, PITR, managed backups and the Management API.

2. Nhost

Behind Nhost is Nhost AB, a Swedish company on the Stockholm commercial register. A project comes with its own Postgres instance and pgvector, a Hasura-generated GraphQL API, sign-in through OAuth, WebAuthn, magic links or 2FA, a file store that can transform images, and serverless functions. Nhost Run adds a managed container runtime for your own services, and Nhost publishes MCP servers for coding assistants.

Nhost is also building Constellation, its own GraphQL engine that it describes as Hasura-compatible. It's in alpha and opt-in per project.

  • Best for: apps that already think in GraphQL, and teams that need their backend provider to be a European company.
  • Price: Starter costs $0 for one active project with a 1 GB database, paused once it sits idle for a week. Pro starts at $25 a month and includes $15 of compute credits, a 10 GB database, 50 GB of storage, 50 GB of egress and 7 days of backups. Point-in-time recovery starts at $100 and a custom domain costs $10 per project a month.
  • What it lacks: a REST layer over your tables in the PostgREST style, and a spend cap. Its pricing page says excess usage is charged rather than stopped.

3. Eurobase, for the app in front

Eurobase isn't a backend like Supabase or Nhost. It hosts the web app itself, on European infrastructure run by Scaleway, a French provider, while Eurobase itself is a business registered in Warsaw, Poland. Your Next.js, Nuxt or Astro frontend runs on V8 isolates, while a Node.js, Python or Go backend gets a container.

The Eurobase + Supabase guide lists what works from each runtime: an app on V8 isolates talks to Supabase over HTTPS through supabase-js, covering queries, Auth, Storage and Edge Function calls, and a container can also connect to Postgres through the Supabase pooler. Eurobase doesn't document an Nhost setup.

  • Best for: hosting the frontend or API in Europe at a flat price while the data stays in Supabase.
  • Price: free to start; paid workspaces cost €10 a month on Starter or €20 a month on Pro, + VAT, covering every project in the workspace. There are no usage charges today: work over a limit is refused, apps on V8 isolates and Functions stop until the monthly reset, and containers and static sites keep serving.
  • What it lacks: its own managed Postgres, MySQL or Redis, so the database stays with Supabase or another provider, plus preview deployments and Dockerfile builds. It holds no ISO 27001 or SOC 2 certificate yet; both are in progress.

How to choose

  1. Write down which parts you'll really use: database only, or also sign-in, files and functions.
  2. If your team prefers REST and SQL policies, start with Supabase. If it prefers GraphQL, start with Nhost.
  3. If a contract names an EU company as a requirement, Nhost meets it and hosted Supabase doesn't.
  4. Decide how a traffic spike should end: a capped bill on Supabase Pro, or a running project and a bigger invoice on Nhost.
  5. Check which certification your buyers ask for and which plan includes it. On both, it's the $599 Team plan.

If you're still comparing wider options, see European Supabase alternatives and Managed Postgres in Europe.

Frequently asked questions

Is Nhost a Supabase alternative?

Yes. Both give you Postgres, sign-in, file storage and functions in one project. The main difference is the API: Supabase centres on REST and Row Level Security, Nhost on GraphQL and role-based permissions.

Is Nhost cheaper than Supabase?

Both paid plans start at $25 a month. Nhost includes more database space and $15 of compute credits, while Supabase includes more egress, more file storage and $10 of compute credits. Your bill depends on which of those you use most.

Does Supabase have a GraphQL API?

Yes, through the pg_graphql extension, which builds a GraphQL schema from your tables. Its main documented path is still the REST API and supabase-js.

Is Supabase GDPR compliant if I pick Frankfurt?

The region decides where your primary data is stored, and Supabase's own docs call region choice a data-location control rather than proof of compliance. The contracting company is still Supabase Pte. Ltd. in Singapore, so check its data processing terms with your adviser.

Can I move from Supabase to Nhost?

You can move the Postgres data with standard dump and restore tools, since both run Postgres. Client code, access rules and sign-in calls need rewriting, because Supabase's REST and RLS model differs from Nhost's GraphQL permissions.

Sources

Deploy your app in Europe

Sign up